Bell Ambulance bellambulance.com Bell Ambulance data breach: what happened and what to do
Attackers accessed Bell Ambulance's network between February 7 and 14, 2025. The company says 237,830 people were affected, with names, Social Security numbers, dates of birth, driver's license numbers, financial account details and medical and health insurance information exposed.
View all 13,115 breaches- Breach date
- 7 Feb 2025
- Affected
- 237,830
- Data exposed
- Names, Social security numbers, Dates of birth, Driver's licenses, Bank account numbers, Medical information, Health insurance information
- Last updated
What happened
Bell Ambulance, a Wisconsin ambulance provider, found that attackers had been inside its network between February 7 and February 14, 2025. It first said about 114,000 people were affected. When it finished reviewing the stolen files on February 20, 2026, the count had grown to 237,830, according to its filing with the Maine Attorney General and reporting by SecurityWeek. The U.S. Department of Health and Human Services (HHS) breach portal lists the same total.
The notice says the files held names, Social Security numbers, dates of birth, driver's license numbers, financial account information, and medical and health insurance information. Which items were involved depends on the person.
That mix matters. A Social Security number plus a date of birth is what identity thieves need to open credit in your name. Medical and insurance details are used for medical identity fraud and for convincing phishing calls that quote a real ambulance trip. Bank account details open the door to payment fraud.
Bell Ambulance is offering 12 months of free credit monitoring and identity protection to affected people. Reports say a ransomware group has claimed the attack; the company has not confirmed that, so treat it as unverified.
What to do if you were in it
- 1
Freeze your credit at all three bureaus
A freeze is free and stops anyone opening new credit in your name. Set it up at Equifax, Experian and TransUnion, and lift it only when you apply for credit yourself.
- 2
Use the free credit monitoring if you were offered it
Bell Ambulance is offering 12 months of credit monitoring and identity protection. Sign up with the code in your letter before it expires, and read your statements for charges you don't recognize.
- 3
Check your health insurance statements
Read explanations of benefits for services you didn't receive, and call your insurer if something looks wrong.
- 4
Expect phishing that mentions the breach
Criminals use real details to sound credible. Don't click links in unexpected emails, texts or calls. Contact the company using the number on its official website.
- 5
Check whether your email or phone is in this and other breaches
Run a free Serus scan to see which breaches include your email address or phone number. Serus keeps monitoring breach databases and the dark web and alerts you when something new turns up.
Frequently asked
Was I affected by the Bell Ambulance data breach?
Bell Ambulance is mailing letters to the 237,830 people affected. If you used its ambulance service, particularly around early 2025, watch for a letter and check the details in it.
What was exposed?
Names, Social Security numbers, dates of birth, driver's license numbers, financial account information and medical and health insurance information. Not every person had every item exposed.
Should I freeze my credit?
If your Social Security number was involved, yes. A freeze is free and blocks new accounts in your name.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
